xlAutoOpen
Static task
static1
Behavioral task
behavioral1
Sample
Invoice 961342809.xll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Invoice 961342809.xll
Resource
win10v2004-20220812-en
General
-
Target
Invoice 961342809.xll
-
Size
4KB
-
MD5
19c72896878a44fe1a1bcfef1ce41937
-
SHA1
306fd240ffb60a722d362f590ad1e5d5fe8ee423
-
SHA256
6de75991a8e2fa1bb9c69a236f2cce6a21ed02a1c889c63b606cde6ed7fd138f
-
SHA512
1daad3dc66cf6d2c456de52c0cfce00f6ba7f50b59e735f3c0aefa136bc5af4b9c24a631114adce5081511800920107695d0e898204f516af581313db44f4107
Malware Config
Signatures
Files
-
Invoice 961342809.xll.xll windows x64
13e99671da6907109c536ea4afa01e7a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetProcAddress
FreeLibrary
LoadLibraryA
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 594B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 758B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ